Another npm supply chain worm is tearing through dev environments

**Executive summary:** A self-propagating CanisterWorm-style supply-chain malware campaign has infected multiple npm packages (including @automagik/genie, pgserve, @fairwords/*, @openwebconcept/*), is actively stealing developer credentials, cloud and CI secrets, browser extension and crypto wallet data, and exfiltrating to a webhook and an ICP canister (canister ID cjn37-uyaaa-aaaac-qgnva-cai); it also contains logic to inject and republish malicious packages (and upload PyPI packages if credentials are found), and shows strong tradecraft overlap with prior TeamPCP-linked infections though attribution is not confirmed.